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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A method for provisioning users with resources, the method 
comprising the steps of: 

establishing a set of attributes, organizational information, and user roles; 

defining a plurality of resource provisioning policies based on selected attributes, 
organizational information, and user roles; 

receiving attribute information, organizational information, and user role information for 
a particular user, resource, or database; 

determining which resource provisioning policies are applicable to the user based on the 
received user role information, organizational information, and attribute information; 

seeking additional information or authorizations from third parties in accordance with the 
applicable resource provisioning policies; and 

provisioning the user with the resources specified by the applicable resource provisioning 
policies if all necessary additional information or authorizations have been received from the 
third parties , the provisioning of the resources being determined at least in part by the additional 
information or authorizations . 

2. (Original) A method as recited in claim 1, the step of receiving attribute information, 
organizational information, and user role information comprising the step of receiving input from 
a user interface. 

3. (Original) A method as recited in claim 1, the step of receiving attribute information, 
organizational information, and user role information for a particular user comprising receiving 
attribute information and user role information from an employee records database. 
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4. (Original) A method as recited in claim 2, the step of seeking additional information or 
authorizations from third parties comprising the steps of: 

providing the third party with access to the user interface; 

indicating to the third party which information or authorization needs to be supplied; and 

suspending the provisioning of resources to the user until the additional information or 
authorization is supplied. 

5. (Original) A method as recited in claim 1, the step of seeking additional information or 
authorizations from third parties comprising the steps of: 

receiving first additional information or authorizations from third parties in accordance 
with the applicable resource provisioning policies; and 

seeking second additional information or authorizations from other third parties or the 
user based on the received first additional information or authorizations and the received attribute 
information, organizational information, and user role information. 

6. (Currently Amended) A system for provisioning users with resources, the system 
comprising: 

a data server for storing a set of attributes, organizational information, and user roles, a 
plurality of resource provisioning policies based on selected attributes, organizational 
information, and user roles, and attribute information and user role information for a particular 
user or resource; and 

one or more processors coupled to the memory and an organizational network, the 
processors programmed for 

determining which resource provisioning policies are applicable to the stored user 
role information, organizational information, and attribute information, 

seeking additional information or authorizations from third parties in accordance 
with the applicable resource provisioning policies, and 
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provisioning a user with the resources specified by the applicable resource 
provisioning policies if all necessary additional information or authorizations have been 
received from the third parties , the provisioning of the resources being determined at least 
in part by the additional information or authorizations . 

7. (Original) A system as recited in claim 6, further including a user interface for inputting 
the attribute information and user role information for a particular user or resource. 

8. (Original) A system as recited in claim 6, the data server further including an employee 
records database for storing attribute information and user role information for a particular user. 

9. (Original) A system as recited in claim 7, the processor further programmed for: 
providing the third party with access to the user interface; 

indicating to the third party which information or authorization needs to be supplied; and 

suspending the provisioning of resources to the user until the additional information or 
authorization is supplied. 

10. (Original) A system as recited in claim 6, the processor further programmed for; 

receiving first additional information or authorizations from third parties in accordance 
with the applicable resource provisioning policies; and 

seeking second additional information or authorizations from other third parties or the 
user based on the received first additional information or authorizations and the stored attribute 
information, organizational information, and user role information. 
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